$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ad644014-d396-3311-b8f5-c0be900b9032.roa File: ad644014-d396-3311-b8f5-c0be900b9032.roa (raw, json) Hash identifier: sZoMtmAdRoGlJ0IDXB4X6BcrBA96q2G/9cqTnUHrDZo= Subject key identifier: D5:E4:FB:D9:B5:BE:65:ED:AF:42:DE:42:4F:A7:83:8A:CE:CC:0C:E1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3F1C5995C123165199C76780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ad644014-d396-3311-b8f5-c0be900b9032.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 207.91.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:59:95:c1:23:16:51:99:c7:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=61f7ca06-0935-43d4-9263-8be3fb478410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a1:d9:a7:cd:d9:0a:65:07:fe:af:59:44:20: 52:e4:f6:90:93:bf:e5:f8:fe:be:f5:18:32:b3:36: dc:8c:96:6d:62:c6:dd:a3:71:6e:16:14:31:94:c8: 46:08:94:8a:b9:f1:d2:04:cf:7c:2b:d1:f7:38:31: 8e:c3:61:61:a2:98:85:e6:2a:b9:c0:66:aa:c7:eb: fd:e6:dc:ee:c5:5c:4e:fd:dd:d1:f5:43:89:1a:96: 28:92:15:0a:ba:9d:ad:10:25:09:d7:1a:95:14:59: eb:f0:b0:30:a4:55:b9:c9:4d:43:54:ee:43:23:4f: d1:09:c3:c5:79:8b:f9:db:d2:5c:7b:82:21:1b:26: 2c:83:a0:19:2b:36:70:0e:ad:47:73:bd:11:c0:57: 5e:c4:f5:cf:3c:69:8f:2d:f8:ad:a9:33:19:98:39: 28:01:bd:27:23:8f:19:7d:dd:c9:d9:4e:a2:4e:86: a5:10:b9:2c:f6:a7:59:3d:71:6a:93:27:e3:20:c1: 36:dd:17:b9:1d:50:b9:da:4d:6d:5d:be:23:9a:b0: f6:cb:58:ee:aa:43:b7:ee:bb:5c:3c:c4:79:1f:90: e8:70:66:d4:74:be:ed:1c:c0:5f:a9:83:12:2d:62: ea:a0:f0:60:c5:c6:b2:f2:71:90:b4:96:04:77:ec: 6f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E4:FB:D9:B5:BE:65:ED:AF:42:DE:42:4F:A7:83:8A:CE:CC:0C:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ad644014-d396-3311-b8f5-c0be900b9032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.91.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:02:ca:5c:dd:34:87:29:a4:9d:41:bb:db:ba:0b:60:20:a9: ec:ca:8b:a3:90:98:96:cc:41:b1:a9:f4:e2:ff:c8:2d:a7:fe: 5d:c8:0d:e5:9e:3d:0b:a6:4c:5a:65:c8:e9:56:61:af:b3:c2: 7f:81:d6:e1:d8:c1:0d:50:29:21:b8:10:59:a2:e8:60:76:de: 13:70:ea:6b:a7:ab:e2:52:e0:d7:23:d8:3b:70:e9:3d:c0:87: 05:c6:94:03:fe:4e:9a:3b:49:97:fa:0f:dc:40:4d:0a:4f:a3: f5:b0:c5:20:49:14:e1:d8:65:51:32:c6:db:6c:42:dd:47:de: 9a:ca:3a:61:93:c7:2c:7b:6a:26:f0:96:7a:d3:59:33:d4:36: 3d:c0:6c:f3:0b:41:46:c5:82:e2:67:41:73:f1:ce:4a:99:02: eb:00:fb:99:8d:d9:65:ad:3c:6e:c7:46:48:55:e5:c7:4a:da: ce:37:50:d2:f2:6e:1d:e9:9f:11:b2:32:70:dd:2e:a1:f0:bf: f8:3c:ab:7b:1d:1a:ba:8d:29:f3:31:19:69:47:24:d3:97:ea: 08:3d:d4:77:96:0d:5a:1c:fe:f0:5d:81:55:d7:cf:a5:16:ad: e5:3c:af:18:d0:05:35:67:4a:b0:28:8f:06:1e:83:b5:c1:57: b7:a6:97:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HFmVwSMWUZnHZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk NjFmN2NhMDYtMDkzNS00M2Q0LTkyNjMtOGJlM2ZiNDc4NDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaHZp83ZCmUH/q9ZRCBS5PaQk7/l+P6+9Rgy szbcjJZtYsbdo3FuFhQxlMhGCJSKufHSBM98K9H3ODGOw2FhopiF5iq5wGaqx+v9 5tzuxVxO/d3R9UOJGpYokhUKup2tECUJ1xqVFFnr8LAwpFW5yU1DVO5DI0/RCcPF eYv529Jce4IhGyYsg6AZKzZwDq1Hc70RwFdexPXPPGmPLfitqTMZmDkoAb0nI48Z fd3J2U6iToalELks9qdZPXFqkyfjIME23Re5HVC52k1tXb4jmrD2y1juqkO37rtc PMR5H5DocGbUdL7tHMBfqYMSLWLqoPBgxcay8nGQtJYEd+xvaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXk+9m1vmXtr0LeQk+ng4rOzAzhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWQ2NDQwMTQtZDM5Ni0z MzExLWI4ZjUtYzBiZTkwMGI5MDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz1swMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4CylzdNIcppJ1Bu9u6C2AgqezKi6OQmJbMQbGp9OL/yC2n/l3IDeWe PQumTFplyOlWYa+zwn+B1uHYwQ1QKSG4EFmi6GB23hNw6munq+JS4Ncj2Dtw6T3A hwXGlAP+Tpo7SZf6D9xATQpPo/WwxSBJFOHYZVEyxttsQt1H3prKOmGTxyx7aibw lnrTWTPUNj3AbPMLQUbFguJnQXPxzkqZAusA+5mN2WWtPG7HRkhV5cdK2s43UNLy bh3pnxGyMnDdLqHwv/g8q3sdGrqNKfMxGWlHJNOX6gg91HeWDVoc/vBdgVXXz6UW reU8rxjQBTVnSrAojwYeg7XBV7eml4s= -----END CERTIFICATE-----Generated at Fri Oct 10 22:13:34 2025 by rpki-client